General

  • Target

    8c137bb7eb4c02dc79f59450a730328e_JaffaCakes118

  • Size

    85KB

  • Sample

    240811-1jb4cazcjj

  • MD5

    8c137bb7eb4c02dc79f59450a730328e

  • SHA1

    d05e34b988bf789910bb170728873cebe31f10e1

  • SHA256

    5aee67d49ef5dd71f924c9a26a20795c027f6f94f220838bdde7a0d33b690018

  • SHA512

    9301a6250b6073db41d131b473caff20b78bca741f22bb6f67b0e0fc45d0f3ee87443001a205aec5ffd98d7703b5def498f683ddb4643b07b7253caaccaf6a7d

  • SSDEEP

    768:28m1Sq4NQErBsH1ZzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiZKPA+7Xoh:Esq+QVwrObAdXWpf/y+7ozNwiGfEftog

Malware Config

Extracted

Family

xtremerat

C2

esam2at.no-ip.biz

Targets

    • Target

      8c137bb7eb4c02dc79f59450a730328e_JaffaCakes118

    • Size

      85KB

    • MD5

      8c137bb7eb4c02dc79f59450a730328e

    • SHA1

      d05e34b988bf789910bb170728873cebe31f10e1

    • SHA256

      5aee67d49ef5dd71f924c9a26a20795c027f6f94f220838bdde7a0d33b690018

    • SHA512

      9301a6250b6073db41d131b473caff20b78bca741f22bb6f67b0e0fc45d0f3ee87443001a205aec5ffd98d7703b5def498f683ddb4643b07b7253caaccaf6a7d

    • SSDEEP

      768:28m1Sq4NQErBsH1ZzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiZKPA+7Xoh:Esq+QVwrObAdXWpf/y+7ozNwiGfEftog

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

MITRE ATT&CK Enterprise v15

Tasks